CVE-2026-16305Not scored
CVE-2026-16305
INFINITT Healthcare · System Manager
Not in CISA KEV
0.3%probability of exploitation in the next 30 days
17th percentile
050100
Higher than 17% of scored CVEs
Not scored yet. NVD has not published a CVSS score.
DescriptionNVD
Local privilege escalation in `SmartUpdate.exe` and `SmartExecute.exe` in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a local low-privileged attacker to execute arbitrary commands with administrator privileges via modification of a world-writable `execlist.txt` command manifest that is processed during application updates.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 4 Nov.
- CERT/CC discloses two critical flaws in INFINITT PACSSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.